Freelancers Marketplace Script Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Freelancers Marketplace Script Persistent XSS Vulnerability ===========================================================...

Freelancer Marketplace Script Upload Vulnerability

Exploit for php platform in category web applications ================================================== Freelancer Marketplace Script Upload Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Freelancer Marketplace Script - Arbitrary File Upload

Freelancer Marketplace Script - Arbitrary File Upload Name : Freelancers Marketplace Script Upload Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r...

Freelancers Marketplace Script - Persistent Cross-Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Freelancer Marketplace Script - Arbitrary File Upload

Name : Freelancers Marketplace Script Upload Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

dotDefender 3.8-5 - Remote Code Execution via Cross-Site Scripting / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

/ DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability: http://www.exploit-db.com/exploits/10261...

CVE-2010-2513

CVE-2010-2513 describes a SQL injection in the Joomla! component JE Ajax Event Calendar (com_jeajaxeventcalendar) version 1.0.5. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value to the view parameter in index.php. This is a server-side datab...

CVE-2010-2513

SQL injection vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special...

Joomla JE Ajax SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Joomla JE Ajax Event Calendar SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r...

Joomla Components jeeventcalendar Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Components jeeventcalendar Sql Injection Vulnerability =============================================================...

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection

Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r Team Shoutzz:- To all ICW members...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CompactCMS 1.4.0 Remote File Upload

dear sir or madam ITSecTeam has found new vulnerability in CompactCMS 1.4.0 tinymce In the following contain some information about the bug best regards [email protected] Technical Manager Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email:...

CompactCMS 1.4.0 - 'tiny_mce' Arbitrary File Upload

Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability52.htm Thanks: r3dm0v3, pejvak,...